You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit da4a943
Browse filesBrowse the repository at this point in the historyBrowse files
|[cachev0.py](/scripts/artifacts/cachev0.py)| cachev0 | Image cacheV0 | Image cacheV0 | standard | Yes ||| 2025-06-26 | Images cached in the SQLite database. |``*/cacheV0.db*``|
199
-
|[calendarAll.py](/scripts/artifacts/calendarAll.py)| calendarEvents | Calendar Events | Calendar | lava, tsv, timeline | No || 0.2 || List of calendar events |``**/Calendar.sqlitedb``|
200
-
|[calendarAll.py](/scripts/artifacts/calendarAll.py)| calendarBirthdays | Calendar Birthdays | Calendar | lava, tsv | No || 0.2 || List of calendar birthdays |``**/Calendar.sqlitedb``|
201
-
|[calendarAll.py](/scripts/artifacts/calendarAll.py)| calendarList | Calendar List | Calendar | lava, tsv | No || 0.2 || List of calendars |``**/Calendar.sqlitedb``|
202
-
|[callHistory.py](/scripts/artifacts/callHistory.py)| callHistory | Call History | Call History | standard | No | phone-call | 0.8 || Extract Call History |``*/mobile/Library/CallHistoryDB/CallHistory*``, ``*/mobile/Library/CallHistoryDB/call_history.db*``|
203
-
|[callHistoryGroupCall.py](/scripts/artifacts/callHistoryGroupCall.py)| callHistoryGroupCall | Call History - Group Call | Call History | standard | No | phone-call | 0.1 || Extract Call History |``*/mobile/Library/CallHistoryDB/CallHistory*``|
204
-
|[callHistoryGroupCall.py](/scripts/artifacts/callHistoryGroupCall.py)| callHistoryInteractionC | interactionC Call History - Group Call | Call History | standard | No | phone-call | 0.1 || Extract Call History |``*/mobile/Library/CoreDuet/People/interactionC.db*``|
198
+
|[cacheRoutesGmap.py](/scripts/artifacts/cacheRoutesGmap.py)| get_cacheRoutesGmap | Google Maps Cache Routes | Locations | standard | Yes ||| 2025-11-12 ||``*/Library/Application Support/CachedRoutes/*.plist``|
199
+
|[cachev0.py](/scripts/artifacts/cachev0.py)| cachev0 | Image cacheV0 | Image cacheV0 | standard | Yes ||| 2025-11-12 | Images cached in the SQLite database. |``*/cacheV0.db*``|
200
+
|[calendarAll.py](/scripts/artifacts/calendarAll.py)| calendarEvents | Calendar Events | Calendar | standard | Yes ||| 2025-11-12 | List of calendar events |``*/Calendar.sqlitedb``|
201
+
|[calendarAll.py](/scripts/artifacts/calendarAll.py)| calendarBirthdays | Calendar Birthdays | Calendar | standard | Yes ||| 2025-11-12 | List of calendar birthdays |``*/Calendar.sqlitedb``|
202
+
|[calendarAll.py](/scripts/artifacts/calendarAll.py)| calendarList | Calendar List | Calendar | standard | Yes ||| 2025-11-12 | List of calendars |``*/Calendar.sqlitedb``|
203
+
|[callHistory.py](/scripts/artifacts/callHistory.py)| callHistory | Call History | Call History | standard | Yes | phone-call || 2025-11-12 | Extract Call History |``*/mobile/Library/CallHistoryDB/CallHistory*``, ``*/mobile/Library/CallHistoryDB/call_history.db*``|
204
+
|[callHistoryGroupCall.py](/scripts/artifacts/callHistoryGroupCall.py)| callHistoryGroupCall | Call History - Group Call | Call History | standard | Yes | phone-call || 2025-11-12 | Extract Call History |``*/mobile/Library/CallHistoryDB/CallHistory*``|
205
+
|[callHistoryGroupCall.py](/scripts/artifacts/callHistoryGroupCall.py)| callHistoryInteractionC | interactionC Call History - Group Call | Call History | standard | Yes | phone-call || 2025-11-12 | Extract Call History |``*/mobile/Library/CoreDuet/People/interactionC.db*``|
205
206
|[callHistoryTransactions.py](/scripts/artifacts/callHistoryTransactions.py)| callHistoryTransactions | Call History Transactions | Call History | standard | No || 0.0.1 || Parses transaction.log file in Call History Transactions |``*/var/mobile/Library/CallHistoryTransactions/transactions.log*``|
206
207
|[carCD.py](/scripts/artifacts/carCD.py)| carCD | Last Car Connection and UDID | Identifiers | none | No || 0.0.2 |||``*/Library/Caches/locationd/cache.plist``|
207
208
|[cashAppB.py](/scripts/artifacts/cashAppB.py)| get_cashAppB | Cash App | Banking | all | No | dollar-sign | 0.0.1 |||``*/Environments/Production/Accounts/*/*-internal.cashappapi.com.sqlite*``|
@@ -386,7 +387,6 @@ Number of artifacts with errors or no recognized artifacts: 3
0 commit comments